Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis.

learn more… | top users | synonyms

-4
votes
0answers
28 views

Why Can't I access IRC@freenode via TOR? [on hold]

I'm working behind a Squid firewall that seems to block IRC, SSH, etc. I decided to fireup tor and use that as my proxy to access IRC, but currently, when my client (HexChat) attemps to connect to ...
-2
votes
0answers
34 views

Are VPNs more secure than TOR? Why? [duplicate]

I've heard from multiple sources that a trusted VPN service is more secure than using TOR. Is this true? Even if TOR is used with SSL? Why or why not? And how do they compare with regard to anonymity? ...
0
votes
0answers
23 views

Lot's of 403 Forbidden with tor [closed]

So I use a script with tor to get malicious junk. Lately I'm getting forbidden from a lot of hosts: wgettor 'http://alerta-ultimandos-pfonline.bitnamiapp[.]com/' --2016-02-03 09:32:59-- ...
-2
votes
1answer
44 views

Is Tor Browser vulnerable to WebRTC leak?

If so, which are all the possible solutions to the problem? Are there similar issues to be aware of? Thank you in advance.
3
votes
1answer
47 views

Simulate Tor Circuit

So an interesting thought popped into my head as I was thinking over the Cryptowall malware. If you don't already know, Cryptowall utilizes the Tor service to make the back-end service it uses ...
0
votes
1answer
61 views

If my connection to a website is unencrypted while using Tor is my IP visible? [duplicate]

I suppose to those of you with technical expertise in this matter this question might seem obvious, so apologies as I am know nothing of this topic. Also what data would be possibly visible by someone ...
1
vote
2answers
104 views

How to route all traffic through TOR?

I have TOR setup on my macbook and I configured my wifi connection to use TOR's SOCKS Proxy that is running on port 9050. When I check my connection it confirms I am browsing through TOR. However, ...
3
votes
2answers
183 views

Tor exit node can know my IP address?

I have read some articles about how Tor works. I know about layer by layer decryption, but there is something that I cannot understand: If the exit node is the one that does the last decryption and ...
10
votes
4answers
1k views

Can someone use WiFi snooping to see data I send through Tor Browser when I'm not using SSL?

(NOTE: I've read other similar questions, but I'm not at all certain about this, therefore I'm asking.) I travel a lot, and I generally use public WiFi spots and hotels/hostels/boarding houses etc. ...
0
votes
0answers
12 views

Tor browser with external Vidalia proxy [migrated]

I have configured an Onion router successfully - based on this tutorial. I connect to the wireless network, and all of my connections are using Tor. I also started Vidalia on port 8118 on the ...
0
votes
1answer
41 views

TOR and Orbot, possibility to add in dynamic AES encryption structure before data is send out? [duplicate]

I read on the documentation about the security issues on TOR, that it is ok if the website is running on HTTPS, but how about on Orbot and site that is not running on HTTPS? Even if it is running on ...
3
votes
1answer
135 views

Youtube.com trying to extract HTML5 canvas data: is Youtube trying to fingerprint users' browser?

While trying to watch a Youtube videos using Tor browser, the Tor browser opens an alert window: This website (www.youtube.com) attempted to extract HTML5 canvas image data, which may be used to ...
1
vote
1answer
55 views

Panopticlick performance for Tor Browser not great. Why?

These are the results for the Panopticlick test on Tor Browser that I just performed: Is your browser blocking tracking ads? Partial protection Is your browser blocking invisible trackers? ...
3
votes
1answer
61 views

Tor browser further anonymity requirements [duplicate]

Tor and Tor Browser do a good job of providing anonymity, but we cannot rely on them alone. The development of newer techniques for identifying web users (such as canvas fingerprinting) mean that ...
3
votes
2answers
102 views

Is using Chrome and Tor Browser at the same time secure?

I question this recently because as I was using the Tor Browser, while in the same time my Google-Chrome was opened, and I right-clicked on a word to search it in 'Disconect', when the page loaded I ...
103
votes
4answers
16k views

How would a resourceful government block Tor?

I came across this article saying that after the November 2015 Paris attacks, some French police officers proposed to ban Tor. Tor is used to circumvent censorship! What security techniques would ...
0
votes
1answer
48 views

What information can Adobe Reader and MS Word send over the internet when a document is opened? [duplicate]

I was reading the warnings with Tor and was curious about this one inparticular: Don't open documents downloaded through Tor while online The Tor Browser will warn you before automatically ...
1
vote
1answer
67 views

How to establish VPN connection through Tor? [closed]

How do I connect to a VPN network via Tor? Is it more anonymous than the other way around (VPN-->Tor)?
1
vote
1answer
20 views

How can I put in relation http timestamp with country time zone of the IP?

I have a series of packets within a PCAP files, among them I'm getting packet with HTTP protocol. starting from IP address I get the timestamp in GMT format and the time zone, for example: Source ...
0
votes
1answer
99 views

Can anyone access my computer if I use tor browser?

Today I was told that if I use tor browser, hackers may access my Computer and can delete or copy files from my Hard Drive. Is it really true? Can hackers access my computer If I use tor? Thanks ...
3
votes
3answers
731 views

Is it safe to access http sites from Tor?

Somewhere I read that you should only open HTTPS links on Tor because otherwise your ISP for example could read the webpages you visit. I searched on the subject and somewhere else I read that the ...
1
vote
2answers
96 views

Is Tor secure if exit node is compromised?

Ok, so let's say exit node has been compromised, or it is run by NSA or whatever. Can they still track you? They obviously can see the last IP address of the server, but what about the one server ...
5
votes
2answers
867 views

Is using VPN, Tor and ProxyChains together more secure?

Similar question (Tor and VPN only). All these three technologies seem to share the same goal, i.e. making internet traffic anonymous. Does it make any sense to try to use them together to increase ...
1
vote
3answers
319 views

How is Tails operating system tested to make sure its authenticity

It's said that tails is the most secure OS ever, but has anyone tested it? i.e How is it known that tails does not do operations such as: sniffing on your own network and sending your data to a 3rd ...
3
votes
1answer
113 views

How to forward HTTP/SOCKS proxy on same port to SOCKS server?

I have socks server (TOR) and can "convert" it into HTTP/HTTPS one via Polipo or something like this. But I want to use it transparently as HTTP or SOCKS on the same port. I have experience with ...
5
votes
2answers
86 views

Is it possible to retrieve data from a intermediate node in Tor browser

I'm using Tor browser for my internet surfing and check my email, my questions are Is my internet services provider able to see the websites I visited Is it possible to retrieve a login information ...
52
votes
5answers
7k views

How can you be tracked using screen resolution/monitor size in Tor?

Whenever I maximize the Tor browser, it shows a warning: Maximizing Tor Browser can allow websites to determine you monitor size, which can be used to track you... How can screen resolution or ...
4
votes
4answers
372 views

Is using Tor and VPN combination more secure?

I have been reading more about Tor and its risks to personal data leakage to the exit nodes in the chain. This last node can snatch encryption keys or log in information of websites I may have ...
3
votes
2answers
271 views

How to recognize TOR traffic

Having a PCAP file with TOR traffic, is there a way fast enough to recognize if any of the packets are part of TOR traffic/sessions? Some tools speak about "protocol identification via statistical ...
7
votes
4answers
672 views

What are the most effective ways to stay anonymous in the internet? [duplicate]

I wonder how hackers can stay anonymous in the Internet. I have some ideas like using TOR or a chain of servers (for example a few SSH tunnels through different countries) but which of them are ...
1
vote
2answers
56 views

Would it be possible to have a javascript observatory, stricter sandboxing and stricter CSP (Content Security Policy) for Tor?

Would it be possible to have a javascript observatory and stricter CSP (Content Security Policy) and implement it for the Tor Browser? A javascript observatory should work similar to EFF's SSL ...
5
votes
2answers
611 views

download file/folder anonymously on a ssh session

I rent a paid VPS hosted online and want to transform it to a sort of treasure chest where I can upload and download files privately. For this purpose I want to do this operation over the Tor network. ...
10
votes
2answers
450 views

Why is Tor over HTTPS insecure?

I don't get how a HTTPS connection over Tor can be insecure. Where's the difference between a normal HTTPS connection and a Tor -> HTTP connection? Many sites recommend to use the Onion-URL instead of ...
-3
votes
1answer
93 views

Why are discovered vulnerabilities of suspicious/illegal online software published? [closed]

For example, the Tor network has recently been hit by a reveal of a major exploit in a research paper. Isn’t publishing the details on the exploits completely counter-productive as the developers of ...
-1
votes
4answers
157 views

Is 100% anonymity possible with Tor under certain circumstances? [duplicate]

Tor has guidelines that define a set of rules/techniques to assure anonymity. Some examples are browsing in small window mode so your screen resolution can't be detected, using HTTPS everywhere, and ...
0
votes
1answer
273 views

Twitter phone verification while on Tor [closed]

Twitter locked me out of my account. I can log in but I can't do anything with it until I give them a phone number. I've had the account for years but they've decided now there's "suspicious ...
2
votes
2answers
288 views

How to increase anonymity of TOR

I need some system to gain a high level anonymity - nobody should have the possibility to figure out my IP. I can use TOR, but I do not completely trust to it. So I have an idea for a system with high ...
1
vote
1answer
1k views

Difference between X-Forwarded-For IP, X-Real-IP, VPNs and TOR

I have this Google Chrome Privacy Preserving Extension that I am working on. Where I can spoof the header information e.g user agents and else. When I spoof X-Forwarded-For IP and go to ...
2
votes
1answer
63 views

DynDNS alongside Tor? [closed]

Is there a way to resolve Dynamic DNS with Tor so that I can connect to my computer behind a NAT even if I am in a country that consider supicious connections to my native country ?
2
votes
2answers
58 views

Could my DNS requests get manipulated while using tor?

I just downloaded Tor Browser Bundle and extracted it. I had no copy of my Tor Nodes Settings so i just browsed using the standard nodes and i forgot to disabke Java Script. I did not notice ...
5
votes
2answers
424 views

Questions on true anonymity

I am going to use Tails to connect to Tor through VPN which has AES-256 data encryption, SHA-256 data authentication and RSA-4096 handshake encryption on my Mac on my school's WiFi (as public as I can ...
6
votes
1answer
85 views

VirtualBox: Ubuntu With or Without Virtual Hard Drive

I've been working on a setup using VirtualBox that uses the Whonix Gateway as a Tor middlebox and I am planning on using Ubuntu for the workstation. I don't plan on storing any information on the ...
5
votes
3answers
275 views

Using Tor browser on a Windows machine

Suppose a person is running a Windows 7/8 operating system. If she/he uses the TOR web-browser, can Microsoft see what they are browsing? Would that not defeat the point of using TOR in the first ...
9
votes
4answers
3k views

Why disable JavaScript in Tor? [duplicate]

Why it is not advisable to use JavaScript with Tor? Yet with JavaScript, you cannot get the IP address of the user except through an external website. How could using JavaScript with Tor expose one's ...
1
vote
0answers
58 views

Can high network usage be detected and prevented in Tor? [closed]

I've already asked this question here but as of yet it has no views/answers. I was wondering if there is any way for Tor to detect high network usage in the context of transferring large files using ...
0
votes
1answer
64 views

Going to host a “hidden service”, should I “wipe” or edit file metadata?

I have made a site that is a hidden service on the Tor network. I was wondering if there any security risks by leaving metadata untouched for various files including but not limited to stylesheets ...
6
votes
2answers
245 views

TOR: same exact entry node since a week ago

Since a few days ago, my copy of TOR (4.5.3) keeps using exactly the same entry node every single time I use it. I am pretty sure that that's not how it used to be in the past. I feel a bit ...
2
votes
2answers
94 views

Could anyone technically see my requests with TOR if the person has access to my router?

I was wondering if someone could sniff the packets I send via my computer with something like Wireshark I guess even if I use TOR and the person could access the router like stated.
6
votes
4answers
164 views

MITM attack between me and TOR entry node

In which ways can my ISP, who by the way controls the WiFi router I connect to, do a MITM attack on my TOR connections and hence read the traffic?
1
vote
1answer
269 views

Using Tor browser to use YouTube and account security

YouTube is not available in my country, but I want to make an account on YouTube and use it. I'm not interested in protecting my identity. It is fine if anyone can monitor it. The thing I'm interested ...